Policy Skills for OpenClaw Agents

agent-bom compliance

@msaad00

AI compliance and policy engine — evaluate scan results against OWASP, NIST, SOC 2, ISO 27001, CMMC, EU AI Act, AISVS v1.0, and related frameworks. Generate SBOMs and compliance reports. Use when: "compliance report", "NIST", "SOC 2", "ISO 27001", "OWASP", "EU AI Act", "AISVS", "generate SBOM", "policy check".

区域政策商机简报

@panting09266-ai

用 Cue 聚合指定区域的政策发布、招商动态及市场数据——筛选高价值合规线索与潜客名单，产出结构化周度情报简报，赋能律所 BD 团队精准获客。

Humanizer Academic

@vincentjiang06

Rewrite AI-generated SERIOUS NONFICTION (EN/ZH) to read human, inventing nothing, in mode `academic` or `popsci`; ABSTAIN-FIRST — leaves it unchanged if it a...

Insurance Bidding Pro

@gechengling

保险行业投标专家，覆盖保险公司/保险经纪/保险科技企业的投标全流程，包括偿付能力披露、再保险安排、监管合规声明、保险条款比对、风险准备金说明等保险特有模块。触发词：保险投标、团险投标、保险标书、偿付能力、再保险、CBIRC合规、保险条款比对。

Agent Governance Assistant

@gechengling

UPDATED 2026: Covers China AI Agent governance regulations (generative AI regulations), MCP protocol governance implications, and enterprise AI audit frameworks. AI-powered enterprise AI agent governance framework — audit agent behavior, enforce security policies, ensure CBIRC/CFCA compliance, detect shadow AI, and generate governance reports. Built for IT risk managers, compliance officers, and enterprise AI leaders in financial institutions. Keywords: AI agent governance, enterprise AI, agent compliance, AI security policy, CBIRC, CFCA, shadow AI detection, agent audit, Microsoft Agent 365, Copilot Studio, China AI regulation, Agent治理, 企业AI, AI合规, 影子AI检测, AI审计, NFRA AI合规, AI治理.

alibabacloud-cms-manage

@sdk-team

Entry skill for the aliyun CLI distribution of CloudMonitor (CMS). Use when the user mentions aliyun cms2, CloudMonitor, CMS commands, or any CMS module operation such as Integration Policy/Center, APM, RUM, Prometheus Service, Recording rule, alert rule, alert template, alert history, event hub, SLS event, PromQL, cloud resource, service observability, monitoring onboarding, metric query, etc.

Insurance Intelligent Cs

@gechengling

AI-powered insurance customer service for China life and property insurers providing policy inquiry, claims guidance, product consultation, renewal reminders...

self-improving-hr

@jose-compu

Captures policy gaps, compliance risks, recruiting process issues, onboarding friction, retention signals, candidate experience problems, and offboarding gaps to enable continuous HR improvement. Use when: (1) A compliance deadline is missed or approaching, (2) A candidate drops off during the recruiting pipeline, (3) A new hire leaves within 90 days, (4) A policy gap is discovered, (5) An exit interview reveals a recurring theme, (6) A benefits enrollment error occurs, (7) An I-9 or employment verification issue is found.

亚马逊-最新政策资讯

@linkfox-ai

查询亚马逊最新政策法规与资讯，支持按站点、时间区间分页检索资讯列表（含 AI 中文摘要），并按记录 ID 获取完整正文。当用户提到亚马逊政策法规、卖家合规公告、平台规则变动、政策预警、FBA/费用政策更新、多站点政策动态、政策原文、资讯详情，或 Amazon policy feed, seller compliance, policy changes, regulation alerts 时触发此技能。即使用户未明确提及"政策法规"，只要其需求涉及亚马逊官方面向卖家发布的政策法规与资讯及其原文，也应触发此技能。

self-improving-business

@jose-compu

Captures business administration issues, policy gaps, KPI misalignment, decision delays, handoff failures, and stakeholder misalignment to improve operational decision quality. Use when: (1) approval or execution bottlenecks appear, (2) KPI definitions conflict across teams, (3) process governance is inconsistent, (4) SLA commitments are missed or trending late, (5) budget variance requires triage, (6) vendor or cross-team handoff breaks, (7) policy documentation drifts from actual practice.

net-deep-research

@h4444433333

Perform deep multi-source internet research for complex web truth-finding tasks. Prefer explicit /net-deep-research invocation. Without the command, activate only for deep online verification, cross-source fact checking, authenticity checks, or complex web research where ordinary browsing is insuffi

Tripadvisor

@ivangdavila

Find and compare Tripadvisor hotels, restaurants, and attractions with official API workflows, URL-first navigation, and policy-safe data handling.

AgentSentinel Safety Layer

@jimmystacks

Local-first budget and policy guardrails for agent actions, with optional remote sync to AgentSentinel.

site-launch-checklist

@samber

Pre-launch checklist for shipping a new website. Orchestrates analytics setup (GA4, PostHog, Google Search Console, Ahrefs), legal compliance, security headers and audit, SEO and GEO with keyword research validated against Google Trends (robots.txt, sitemaps, llms.txt, AI policy, schema markup, hreflang), copywriting consistency via a TONE.md and a humanizer pass in the matching language, OpenGraph and social previews, full favicon set with manifest, quality gates (Lighthouse, Core Web Vitals, WCAG accessibility, mobile testing), and setup of a weekly SEO agent. Use this skill whenever the user mentions launching a site/app, deploying a domain to production, pre-launch audit, shipping a marketing/docs/SaaS site or lead magnet, or says "checklist for the site", "ready to ship", "before I go live", "audit before launch", "ready for prod", or asks for a site review.

Faq Generator

@aipoch-ai

Generates FAQ lists from complex medical policies or protocols. Trigger when user provides medical documents, policies, or protocols and requests FAQ generat...

Gateway Watchdog Discord

@jonathanjing

Monitor the OpenClaw Gateway plus configured Spark, Local API Hub, and Dashboard loopback health endpoints with a read-only watchdog state machine, local state files, cooldown dedupe, and optional Discord alerts on macOS. Use for explicitly configured foreground checks, cron execution, LaunchAgent installation, recovery notification, and low-noise incident reporting; it does not rewrite OpenClaw config or restart services.

Flexible Database Design – SQLite flexible schema & knowledge base skill

@mars2003

Guide agents and users to design and implement a "flexible database" on SQLite that can handle semi-structured, multi-source data. Typical scenarios: persona...

alibabacloud-ack-cli

@sdk-team

Use when the user operates Alibaba Cloud Container Service for Kubernetes (ACK). Covers cluster lifecycle (create / modify / delete / upgrade), node pools & nodes (create, modify, delete, repair, fix CVE), addons (install / upgrade / uninstall), KubeConfig & RBAC (issue for RAM user, grant / revoke), security & policy (CVE scan/fix, policy governance, KMS, delete protection), logging / audit / alerting, intelligent O&M (check / inspect / diagnosis / auto-repair), async tasks (track / pause / resume / cancel), templates, autoscaling, tags & quotas. Triggers: create / upgrade / delete ACK cluster, migrate to Pro, scale nodepool, fix node CVE, install / remove addon, get / revoke kubeconfig, grant RBAC, enable audit log, run inspection, diagnose cluster, track task_id, debug cs error, Forbidden.RAM, kubectl cannot connect. Terms: ACK, container service, k8s cluster, nodepool, addon, AutoMode, Terway, Flannel, ForRegion, kubeconfig, RBAC, CVE.

claw-mechanic

@bkf-gitty

Diagnose, audit, and repair OpenClaw hosts when an agent, gateway, plugin, cron, model route, memory engine, channel, approval policy, or update looks broken, expensive, slow, looping, stale, or misconfigured. Use for focused OpenClaw health checks, post-update triage, plugin update verification, model provider/API wiring audits, cron timeout/root-cause work, exec approval/reviewer problems, update admission refusals or half-failed updates, gateways stuck in restart or offline-maintenance loops, keychain-backed SecretRefs unreachable over SSH, and rectification plans that need live proof against openclaw.ai docs instead of guesses.

Insurance

@agenticio

Local-first insurance record organizer for tracking policies, renewals, claims logs, and related insurance records. Use when the user wants to store policy d...

Skill

@meshailabs

Verification gating for AI-generated artifacts. Policy checks to catch dangerous patterns before execution.

Credibility Action Gate

@ales375

Gate uncertain claims before bounded action

Dont Hack Me

@peterokase42

別駭我！基本安全檢測 — Security self-check for Clawdbot/Moltbot. Run a quick audit of your clawdbot.json to catch dangerous misconfigurations — exposed gateway, missing auth, open DM policy, weak tokens, loose file permissions. Auto-fix included. Invoke: "run a security check" or "幫我做安全檢查".

Ai Claims Assessment

@dangsllc

Assesses public healthcare-AI vendor documents to identify gaps between AI use claims, legal language, and HIPAA rules on PHI handling and model training.

policy-to-action

@zhouq2039-lang

政策翻译官 —— 官话 → 人话 → 行动。把复杂政策条文转化为「能不能用、能省多少、该怎么做」的标准化报告，企业/个人通用，双输出 HTML + 可转发文本总览。

Openclaw Sec

@paolorollo

AI Agent Security Suite - Real-time protection against prompt injection, command injection, SSRF, path traversal, secrets exposure, and content policy violations

Alibabacloud Cfw Acl Diagnosis

@sdk-team

Alibaba Cloud Cloud Firewall ACL rule read-only diagnostic assistant. **Trigger Scenarios**: Diagnose ACL rules not taking effect, troubleshoot Internet/NAT/...

Alibabacloud Tair Ai Assistant

@sdk-team

Alibaba Cloud Tair (Redis OSS-Compatible) Database AI Assistant. For Tair/Redis instance management, performance diagnostics, memory analysis, hotspot key de...

Alibabacloud Kms Secret Manage

@sdk-team

Alibaba Cloud KMS Secret Management Skill. Used for managing secrets in KMS, supporting create, delete, update, query operations, version management, and rot...

Alibabacloud Ddos Native Intercept Query

@sdk-team

Alibaba Cloud scenario-based skill. Query and troubleshoot Alibaba Cloud DDoS Native Protection (Anti-DDoS Origin) network-layer intercept records via aliyun...

Alibabacloud Waf Bot Management

@sdk-team

Alibaba Cloud WAF Bot Management automated configuration assistant. Automatically completes bot protection policy evaluation, configuration, verification, an...

保险计划书分析大师

@danielshisafe

面向消费者/投保人的保险产品分析器。当用户上传/粘贴/描述一款或多款保险产品（储蓄理财类如增额寿、年金、分红、两全、万能；健康保障类如寿/重/医/意外；财产险如车险/家财），希望「分析这款保险值不值」「对比几款产品」「算算 IRR/回本/总利益」「看懂条款坑点」时使用。支持单品深析与多品横向对比，内置红利/万能计算规则与消费者避坑清单。注意：本技能只做产品分析，不自动出保险计划书。